php事前定義sql

<?php
	$mysqli=new mysqli("127.0.0.1","root","root","php");
	if ($mysqli->connect_error) {
		die("    ".$mysqli->connect_error);
	}
	$mysqli->query("set names utf8");
	$sql="insert into t_user (name,passwd,email) values(?,?,?)";
	$mysqli_stat=$mysqli->prepare($sql);
	$mysqli_stat->bind_param("sss","  ","typ5669298","[email protected]");
	$res=$mysqli_stat->execute();
	if (!$res) {
		echo "execute fail ......";
	} else {
		echo "execute successful ...... ";
	}
	$mysqli->close();
?>

      ，      sql，    ，     ，      
bind_param     ，    ，             ，     ，     ，     
 
<?php
	$mysqli=new mysqli("127.0.0.1","root","root","php");
	if ($mysqli->connect_error) {
		die("    ".$mysqli->connect_error);
	}
	$mysqli->query("set names utf8");
	$sql="insert into t_user (name,passwd,email) values(?,?,?)";
	$mysqli_stat=$mysqli->prepare($sql);
	$name="  ";
	$passwd="typ5669298";
	$email="[email protected]";
	$mysqli_stat->bind_param("sss",$name,$passwd,$email);
	$res=$mysqli_stat->execute();
	if (!$res) {
		echo "execute fail ......";
	} else {
		echo "execute successful ...... ";
	}
	$mysqli->close();
?>